National Cybersecurity Center
Advisory Alert

New LastPass Scam Circulating

LastPass is warning users about fake support emails that claim there was unauthorized access and ask people to click links or enter their main password. These messages are trying to trick users into giving up the single password that unlocks all their saved passwords.


Who Is at Risk

Anyone who uses LastPass or other password managers and receives unexpected emails about account activity.

What to Watch For

Emails that appear to come from LastPass asking you to click a link, confirm or enter your main password, or urgently report unauthorized access.

What to Do

Do not click links or enter your main password from the email; instead go directly to the LastPass website or app and turn on phone-based verification in the app.

Stay Protected

Sign up for free alerts and get connected to your Personal Cyber Advisor today.